krb5-pkinit-1.21.3-2.fc39$>|{U1u!W艓 >AA?1d  =04CR   , H   .Lh(89H: BGHIXYZ [$\4]P^b/def l t$u@v\wxy,|Ckrb5-pkinit1.21.32.fc39The PKINIT module for Kerberos 5Kerberos is a network authentication system. The krb5-pkinit package contains the PKINIT plugin, which allows clients to obtain initial credentials from a KDC using a private key and a certificate.g"_buildhw-x86-05.iad2.fedoraproject.orglFedora ProjectFedora ProjectBrian-Gladman-2-Clause AND BSD-2-Clause AND (BSD-2-Clause OR GPL-2.0-or-later) AND BSD-2-Clause-first-lines AND BSD-3-Clause AND BSD-4-Clause AND CMU-Mach-nodoc AND FSFULLRWD AND HPND AND HPND-export2-US AND HPND-export-US AND HPND-export-US-acknowledgement AND HPND-export-US-modify AND ISC AND MIT AND MIT-CMU AND OLDAP-2.8 AND OpenVisionFedora ProjectUnspecifiedhttps://web.mit.edu/kerberos/www/linuxx86_6448AAAAAg!wg!wg!wg!wg!wg!wg!w4f65f2831d9429600babe14ca024add3ba514448eec6476e7fea0ddb35075dde../../../../usr/lib64/krb5/plugins/preauth/pkinit.sorootrootrootrootrootrootrootrootrootrootrootrootrootrootkrb5-1.21.3-2.fc39.src.rpmkrb5-pkinitkrb5-pkinit(x86-64)krb5-pkinit-openssl@@@@@@@@@@@@@@@@@@@    @krb5-libs(x86-64)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.25)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.38)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcom_err.so.2()(64bit)libcrypto.so.3()(64bit)libcrypto.so.3(OPENSSL_3.0.0)(64bit)libk5crypto.so.3()(64bit)libk5crypto.so.3(k5crypto_3_MIT)(64bit)libkeyutils.so.1()(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libkrb5support.so.0()(64bit)libkrb5support.so.0(krb5support_0_MIT)(64bit)libresolv.so.2()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsZstd)rtld(GNU_HASH)1.21.3-2.fc393.0.4-14.6.0-14.0-15.4.18-14.19.1.1g"f&@fe@e% - 1.21.3-2Julien Rische - 1.21.3-1Julien Rische - 1.21.2-4Julien Rische - 1.21.2-3Julien Rische - 1.21.2-2Julien Rische - 1.21.2-1Fedora Release Engineering - 1.21-3Marek Blaha - 1.21-2Julien Rische - 1.21-1Julien Rische - 1.20.1-9Julien Rische - 1.20.1-8Fedora Release Engineering - 1.20.1-7Julien Rische - 1.20.1-6Julien Rische - 1.20.1-5Julien Rische - 1.20.1-4Julien Rische - 1.20.1-3Alexander Bokovoy - 1.20.1-2Julien Rische - 1.20.1-1Julien Rische - 1.19.2-13- libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: rhbz#2304071 - Fix various issues detected by static analysis Resolves: rhbz#2322704 - Remove RSA protocol for PKINIT Resolves: rhbz#2322706 - Make TCP waiting time configurable Resolves: rhbz#2322711- New upstream version (1.21.3) - CVE-2024-26458: Memory leak in src/lib/rpc/pmap_rmt.c Resolves: rhbz#2266732 - CVE-2024-26461: Memory leak in src/lib/gssapi/krb5/k5sealv3.c Resolves: rhbz#2266741 - CVE-2024-26462: Memory leak in src/kdc/ndr.c Resolves: rhbz#2266743 - Add missing SPDX license identifiers Resolves: rhbz#2265333- CVE-2024-37370 CVE-2024-37371: GSS message token handling Resolves: rhbz#2294678 rhbz#2294680 - Fix double free in klist's show_ccache() Resolves: rhbz#2257301 - Do not include files with "~" termination in krb5-tests- Fix double free in klist's show_ccache() Resolves: rhbz#2257301 - Store krb5-tests files in architecture-specific directories Resolves: rhbz#2244601- Use SPDX expression for license tag - Fix unimportant memory leaks Resolves: rhbz#2223274- New upstream version (1.21.2) - Fix double-free in KDC TGS processing (CVE-2023-39975) Resolves: rhbz#2229113 - Make tests compatible with Python 3.12 Resolves: rhbz#2224013- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild- Replace file dependency with package name Resolves: rhbz#2216903- New upstream version (1.21) - Do not disable PKINIT if some of the well-known DH groups are unavailable Resolves: rhbz#2214297 - Make PKINIT CMS SHA-1 signature verification available in FIPS mode Resolves: rhbz#2214300 - Allow to set PAC ticket signature as optional Resolves: rhbz#2181311 - Add support for MS-PAC extended KDC signature (CVE-2022-37967) Resolves: rhbz#2166001 - Fix syntax error in aclocal.m4 Resolves: rhbz#2143306- Add support for MS-PAC extended KDC signature (CVE-2022-37967) Resolves: rhbz#2166001- Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild- Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf Resolves: rhbz#2114771- Strip debugging data from ksu executable file- Include missing OpenSSL FIPS header - Make tests compatible with sssd_krb5_locator_plugin.so- Enable TMT integration with Fedora CI- Bump KDB ABI version provide to 9.0- New upstream version (1.20.1) Resolves: rhbz#2124463 - Restore "supportedCMSTypes" attribute in PKINIT preauth requests - Set SHA-512 or SHA-256 with RSA as preferred CMS signature algorithms Resolves: rhbz#2114766 - Update error checking for OpenSSL CMS_verify Resolves: rhbz#2119704 - Remove invalid password expiry warning Resolves: rhbz#2129113- Fix integer overflows in PAC parsing (CVE-2022-42898) Resolves: rhbz#2143011krb5-pkinit-openssl1.21.3-2.fc391.21.3-2.fc391.21.3-2.fc391.21.3-2.fc39.build-idfaa658370e02e35ea4fd7e41e50de8219e6bac69krb5pluginspreauthpkinit.so/usr/lib//usr/lib/.build-id//usr/lib/.build-id/fa//usr/lib64//usr/lib64/krb5//usr/lib64/krb5/plugins//usr/lib64/krb5/plugins/preauth/-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wno-complain-wrong-lang -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -fno-omit-frame-pointer -mno-omit-leaf-frame-pointerdrpmzstd19x86_64-redhat-linux-gnudirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=faa658370e02e35ea4fd7e41e50de8219e6bac69, strippedR RRRRRRRRRR RR R R RRRRRhttps://bugz.fedoraproject.org/krb5utf-8798004334fb4be6f5edbdfebf4b1bbfe7dd86e820c08f268765204d416d9c461885e0d9193f1a957c57856b53efe6633d1a2d9fdacbc7580ff0d4deecd8c29c0?(/hYDLT3krb5-pkinit-1.21.3fc39VWhKpp@Sޚ %A2 >t 6 _LPTdh 3!92d LuZLg"e DxlY|A穯$g%A޾5\6$D1GbJ\47Rхev5rs):y3,."x)K3,\p[j1xMwQ9$Ӭo~S=)jIe3gYcfmn\lnRU!N5Y|x=g52weekHn1<Wo)$x^ շjʭErf6撠 RC'07vghxJJ$e060cb83c522b3eeb82a323c162302f4be38c9b07e259781b30638207babd8075d45c0a2bf5613b970d04e318721e0859d316004388b603e00483046022100ca37935a130bfb0184d33ab6a98099b8b2e6b4a9973560011fc8b45a6f72542a1dd1ac6fc6a79e579ff111646e6564db16a33746aeae1189e7d634988Qԩ.Pj5ZzZ`A %" /Z ( kzo B a7*?+>lgp ( [,N c !]>.PdQ OL0@CEEpF7Ѐ=47n$IW!bf A9 rdv221ESh1`x8 0 (h0@x  l 0ل \ &Y>P{4f(~bXf *9U\(L "a[֘jb03N Ԣ(ĠZ[nK#F"t3RgSݱێ\&D4 mpP'ڵ)mYɑ(C Nj^^VEhұ$DװqFa.můܦ["74zLD ui%agbͿv/|f}(|eCl2PghU7k, e k%Σ,FvUc;(Xǁ9NbHцW q|x:EndZ ^EI R $T˰*@A)řnzj E ]M0 |ӣ:RQ}#+0aY>c+ε:n"Vk1j nQ3 {封uTr?;~I]Oͷ|SWs;n2/o鋑P Y"d9ݶ~^QgyL>0UD *-Q”pдsu )3t5cƴwT \ ZMm]2\ם˲8ٓN;mpp93zD Nlz?G= R]Ixs~5EzJʷS=F֦U<'йRlԘ ظ/=)~) V&AJZAJ:IίvΚQ]͜t?T6 |*r'5.;/\8?ʝSgR2]&qKXRk?gi_%A,ug bެVzQB"L??\ oGR?X˒i N]qol4vWvxy[H@m-sjH/P  fc{0@`9Mc[aoj!`quMѮķyZէ@`MZ&ik*}<#ҋ+=/8SpO:x,:F^Q٧> 𔬶ᡘي E#j])\gwS])1:_L|mV@8'Y!dih#Fj&5hl/WZf\M,I`"|K971LH1\]D5ebFqS$"ؐ;+`xpyGB4H* +0B0vnXV!SOy11gI2^=\R$KVp/*S˕ymS&=Zy-/b 1d,>f-ѥVTZa6'yLX͉ cb~ y|-@!VPj)`cA:x\hqP4  1wGEK)ATq:KFJdT˻Uڧ)6TQAS܋c@ZbYEIIIU${;O?[X&\{0JD _J ʊA9- .1q?^3PcT;؏;?&)A"(}>|XD9 `g`tO{_ Q=Y~qs4\Oyi\9#ABYqŰԹ1I|tq# R7Q8ɛg~'#Kgljk"D!-|ԡ$[6JX'NЏ(@SW="(w,]aB'A,I.ʑzUsI$o15`D3fͭ"qUITS=.NS(_T/2tsR@,@U&<êZ>8= Đ%Dz*JP`V0LH$*f:ˍ_"گuPВUQ5v̆9*Dī ""&_ @ m9+8uuY{YCYT$ATmA*<ڨO*\Q*W DPy?T h#AT,"")bbYA0L( $#L CdD [] X)T0h{+[) [WMLS@/B % pbJHw)J=(WȃH'=5ǁr.c j# /ⷱV܆kM- ,*3@8((ʋdE 2M^jڤE[[-QC׈l_a@Do%Jf`E4PSA?2( AE/)|DC$W]K؀TU3Ɉ#`EvpWGmN N v"q\d ;5Ҵ8 i⺈OG x41E9cˍ!"h&g\AMZª[^ۜ K$TFW~;y1)t\}P 3.?0p0i$Usp KU$ Uzyn\9":48=8XwTT*jH9:SU媮UP"&ӴcP];e@j`A>u@7SNt|"жrfR\u^_nCb{$ȁU5  JHmlhp]u%5Zl5- z59hlP\] ӜܻEǁn<@.jlsm-Eo;)Uz *dYRoroLo3#Gd V(r\BbX9_7B+ش r^;8pP{ _.qsSOo/<x9W3T^RwFAP>< pw&4zV~sl`荖wS@Nz Aݟ@28AUrP|4] x ^h,:cVîj͞%D+X˵<B `B 9WB}EN69Nc>5EnVT9X ED4{Os3y{G|7A7ح=٩T(03QKn? ymz z]?+^v~obqߓf~1/ƌ/ޯbc}߉sJ޾>D^{]d(q~Nˇ?gW<|hSMs^s R1d \I{4}!qF%.wc88<$@{;ⳓ"vqR>r^s!JPJ_+1PɧaCI/9Ĺ{IWl+M'RuZCg G ~r!I'zYTppay /V-9$8f lؠ p(qPFT9:KBnZ[=~ 8a'vL/[Ki-cwzj Ӝиx(~M G? HR((P8F59޶On1vv6н To7 ¦^E#!GqɭIAO~>ȃ)(*r_G0Co6|t &QƝ1t6 6Bg(?>dNʩgnV{4L|!&ZtK0;`# i*$b/{(\OɼDpTUf2)AbX F._יP;9X| niA&arNU+x&̠cSǝwCj-$ODv^P*R4peJQ;w=8htTUe {rE{OH;N=^*ǜ )ݼ[WrE4@n; +#a6.ѳg76I+tۢz^/%"*.xوFPB@v†;rXԱ*y' `jY Y7yFw<vY.DgQ:ۺ7yPDfv$wrc$놤ӀߚV31XͤỵG{f,K@bQ]!1}YDSшkB*1APlф6y|~ eqHB=+x >K.yV!/o?/uݖ;eO^9ѶAmf&B(EBeXґAرia2˚f&mX ߍf?V!NKW9d\PX3H,9HwL` 5h ٖ?HY]NI*Vq*&A1;Ei kM =ٽtk 6WF0)AȬMɸw@aptC [ r[ToBSJXsU15ku*."Y(Gޜq QZ߹"`cƗ/Qy@ <|c!(D+c4ni$5+>H=Ίy+s^ꎥӷ=)xḡ܅M3K5XT9zf6)/J]Fr"p``7;zteZ|X@RX[e9QMR81s)BS-*]=ĒةitGLM;Z۝vZud.`P=G!/Pt#dwi3El\$&%& ?jG=7.s^wC1^&Pw&Z": g|Ljw"0 eA-WNrxs&Phl3'e jLn +py3-r&g';О!Nm5H_ +Pkj%=H5!/5Bsj10N^h U)oT O(maT@9̄m^^NHS|C0ِ"@ !>Itkm[.3_~1GMx!>t6q F7YɅ19Vj*̻ˮdQ鬼2Z,)X>([>yvX }i린ʤg': /sHrm : oi۞77o`be\yBQY뗫"ĊE`,9% (u\2TݕݥOy@㪗[G;of$N|^"j]!'SRG1 alW;6؄K'zߥh6^XbkM$aNy:nelԡ'(C}e~~ss Z']93A-s?v\jm8t<apUǶ2L+x Ā&763']v"4!BBA]T?u,d!ʨNY0ܪ3z4ͩgȈ;[` qB@t 1(+ccUK0r=U^l!!(H%)JR)KJb{Z}. M=~&_~߿.\p_KG%w1i "x_]E1GJcz՜ `WkBb!m#xtPa0]kijZUU6NݡPଡp'XY,dEN(" E'L<L%+ʲv$z]f(WItY!v^?f-ݲ`BD+꾧չ]MAo %+$k,e_)2AŨOX#9rkIx֭74+O!#T,v4[=3rmaY˫Y{EstYE\ﲖ|`C3mi w!Ix3~+ug/#ŏ7h,PD߾ma$7(O6[LTMlԌcIQzwuꭓ R'&i4\&fB fPpILAC D})u،ܫTSr{_}W@nڐyJ59RjE.^Dk/±ذC0\υ dB)H^B"bM`eGE3{L-dJرQ[+Q&J.4bqbS% Y- vi Sik7 5\nd4!r3gA]hVZ"ᾟC'L,leqګ 2f`jqmیHa#,[ިM{Ke™"p4#7F[)o61Dͥ\;#@ >q#q.bDŽn{1 g|7I7W^K(DjipMfN#Qs"k[=EyB<cZ|VCth,e1)8g[Z5OM`ȊkWNC ˘YXm!4}-ċ,w\=O"",/S |.m]S GE3Ր1ībeGpIH,ɆY4 @.V2L`ѹ˟ȍ+l|(.A6@Y~~)]>V EH 89!.$_2S]mNM F !L%?[mM1|;j{7YHB8|8H, jܣZھ<{|vO+ UzX"u(0).Wx9ɖ|.>3 .l!iK㽲}F p[z}e ֩2dn}%Y^ #4/)„zJEVP_PKEY_CTX_newfreeOPENSSL__cryptodcgettextX509_STORE_errorASN1_OBJECTstrlensnprintf256sha512fileBIOc_no_locationssk_numissuer_ni2d_CTETRINGPKCS7_ISSUER_AND_SERIALvaluecmpsize__memmove_chksSignFinald2objecputINFneck_cksk_makescipal_compared2i_PUBbitsk5_bNAME_TEGid_enctypBNchrregaslearssagtok_rureenv_oc23_lbuildamkdcpreauth_vtcldH+%(uffDSHdHHEHHtJHHxH;Ht H E%]f.UHAUIATH?1HtaHHt4AU1E׉H~ HuHHUܐ`IT$fo@C JHJH H RPH{{LcMt%I|$ <$rʉ { [A\A]A^]ЀLx LExM 51HIcH-(կMtL>A7鳪hsH w11wȺ_G{Bش/E11H@87ŃE1H8E>HDLȅt MĈHxڧEALL蛝E1@EFDA_]A:ǖuH0Ӎ@h0`)pҿ 8Ǡ(`@LeE;8(@HP(X8 ݍ`=P_=v`HQLI@⣼闀8ʐ(\$ AME\$bvIH5Yd!1Mf+WPWP KcGYj Ou@)9BIMHyb-l*))Ҿ"^FP( A4fnlb8HhPo@G)Eu@~MvxN,uIxLHD (˽M(HGM9t  wJ4+(1E0&2(+D+gЋ@HR2F\_!ɉEJ4]}($w0p u#W1D$PAV_ZY(It$IǃiL0 A8"IM i)(cI#>EI?&!ΈO.-#\A̋:=u = =1Ae"FFz {ui!|qtzt$/,+%M&$DAP>L1)ULH8LE0@]@ˆG=| WxET`AXA, +LN]P: =< s@"C@EUHS@C j 2H &}]PL{T6A C0ʍU!蹋{8yDksturnPA dataUnsupported RSA ;[@`(0@`@$Pp 8dpP0av 8柃eCud.b4s 0;Q'c\:dծߖJՆ~/V)>ğe5DOE+wr[U:x?øbmsf_kjRA6qA+|,-;Y Ռ>'- -ZqPP\WΑN)v=vmٖMŬwE$uzr9M| ?U;FC&jFBa%]~2,*|Hœ7,,ܞ&hE=GF)Svraٗmk Q?pxzt=L;$wr~ӆOy;LdA&ͣW]Wh PN_mZL˰Z.59]X*\sL'eIˑBZ֑IZ?)MQ&5s->K{C`\M PE x7.F} yA'>4ÛM Oh&'%KMr-fĶj(t6D\ϿԢ 2_RW*\˛ g2a{D=M S*V"AmUV·A󝺜q9}gp;|)HO bu{6M$Zv AgpP:A>1.n81Gur|8\AVp~;QMQKiވ.2+qW>֧![1/-gnNWo7u%y-OS7Eu8cTaV>Y Q %*+Pl Z=8%yaM5597K~`Y47B?%diDo'Uuozg\z4?>(1 6}{H3-{CAZ!·]Ef]ap_ 0|0wՌ|-W27 E^bY$+Gġiz7}[Q$9MGI@Km?*7`?Kf,hȑ_234GKSEJ|Gb)Go]C`g9;& *#Us_C-FΈ"C .uڏ/ޅKZO)_Zo{;QEBZΤR~nRˆ(MSZR,r OAosn &h*5 :)!pWe}'Z(ͅ[8hzzZD-)ks{{NΝ7K}_?>7XcE|1iNQH_,X]nq$ | N T.\a56ъ0c>{2e,iBd-~&f^Tfm}i25a pJzCJ 2Ldsqjd%{̑6ASeҏ&ߥSwڟLPseU]v OJHFX*w+a7H(dV1зkH䲹Z.Ԋ`74^4{@(pD ǰ?'(ݍe&*gO7aو']1/ (ˮ5/ҧ 2洭 N݋U0ujp0xtjiBu?OhMF^j ϴ]N3KMpo7@\}\%~H5%7T&-e_Ưd~7S`U5|5"xx .6[@""ڳU6^JIwiJzm}K;ŴFY;ou!i buXz4"MG#aJ={Z1_L]-X3 B?T@Ey]CnW)4i 㸱sրe/6, / 72 />IFn.H=&# ݹ6r`W+w`) ׬y;wT$&2$΍>y`Vf47Oosac$qEjmk ȗD}@ T5;/IiHCJ@x\0%l f i?;嚌)lÙ9-tm6?B2NaBYͥ [R'uV~du3 3n)%ϮGr]!" ce[ ϜNYTRkT:iǘ4'gG8 #ڷ,,D԰ɋMvYk]cf`kua*3b|w{ߚ헄$5)w%br#i7nͅˮ,1ư]):g`\D(L:JKi|>尫ѻ)5jy򫯲wHG/IӋDBn5#8vbN?J HBc[^+/%o+2q}IΟm3#ΥǰRGFz+ Tb$J. _G;#RϝkM8l&6s.*=@DXRO W2ȶ]Vx"R|KٚP4Kѷ1v99u ! `ҤkxM @H2Luq45hK*4iG?ÂFօ LT֖Ʋ6Ryk0HDay?:w^$;&if,HFl.oY 5F O8}io-)/z~$hImHpoԐ9NҬg$]$R!cn [@Tp)?$kbۦl湖V{T=9e~~)9mƉ-`E aYِ% XKAnJ1-dI QZ I$AF5јAfcѴ:4DMĨB1DBTBʧs6c(0ÜX1KY*j}!bh@cW)19pڪRɤ!4ntL7b0B@h[Os0?W-QmU/%eqn=]Ø Քޡcz+7wG6|mnEia{٣|f1id;~@WN7ˆaƣxiUxKc/1彬Q+HWN`YaLj12^,)zMUT6uw޿z(4]/*oAjd+=~ G-$8{۪A ck6v8${myToxLڴa=S,F0> j)t{w]?停m8) EM[\yD7ONӶr\W}yv …&${+3J;YN 7%klE`|=fiy("r5;7ϏV w q %ۄq$L_ x`P0xC qo u]H[j=?d\Bt;ߍ:Kxm1#EIcM y SIE3p: .k CNa(mڗ;HԖܺI',FBf^29τŢ,to Bd)6D{|8&7[l^gC0qJ